reallyme-crypto 0.3.1

Cross-platform cryptographic primitives, key formats, and conformance-tested provider bindings.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
//
// SPDX-License-Identifier: Apache-2.0

//! Signature-specific generated algorithm mapping.

use buffa::{EnumValue, MessageField, ProtoBox};
use crypto_core::Algorithm;
#[cfg(feature = "rsa")]
use crypto_proto::generated::proto::reallyme::crypto::v1::RsaPublicKeyDerEncoding;
use crypto_proto::generated::proto::reallyme::crypto::v1::{
    __buffa::oneof::crypto_algorithm_identifier::Algorithm as ProtoAlgorithmBranch,
    CryptoAlgorithmIdentifier, SignatureAlgorithm,
};
use crypto_proto::wire::CryptoWireError;

use super::identifier::algorithm_branch;
use super::wire_error::invalid_parameter;
use super::wire_error::unsupported_algorithm;

pub(super) fn signature_algorithm(
    identifier: &MessageField<CryptoAlgorithmIdentifier, impl ProtoBox<CryptoAlgorithmIdentifier>>,
) -> Result<Algorithm, CryptoWireError> {
    signature_algorithm_value(identifier)
        .and_then(|value| Algorithm::try_from(value).map_err(|_| unsupported_algorithm()))
}

pub(super) fn signature_algorithm_value(
    identifier: &MessageField<CryptoAlgorithmIdentifier, impl ProtoBox<CryptoAlgorithmIdentifier>>,
) -> Result<SignatureAlgorithm, CryptoWireError> {
    match algorithm_branch(identifier)? {
        ProtoAlgorithmBranch::Signature(value) => {
            value.as_known().ok_or_else(unsupported_algorithm)
        }
        _ => Err(invalid_parameter()),
    }
}

#[cfg(feature = "rsa")]
pub(super) fn rsa_public_key_der_encoding(
    encoding: EnumValue<RsaPublicKeyDerEncoding>,
) -> Result<crypto_rsa::RsaPublicKeyDerEncoding, CryptoWireError> {
    match encoding.as_known() {
        Some(RsaPublicKeyDerEncoding::RSA_PUBLIC_KEY_DER_ENCODING_PKCS1) => {
            Ok(crypto_rsa::RsaPublicKeyDerEncoding::Pkcs1)
        }
        Some(RsaPublicKeyDerEncoding::RSA_PUBLIC_KEY_DER_ENCODING_SPKI) => {
            Ok(crypto_rsa::RsaPublicKeyDerEncoding::Spki)
        }
        Some(RsaPublicKeyDerEncoding::RSA_PUBLIC_KEY_DER_ENCODING_UNSPECIFIED) | None => {
            Err(invalid_parameter())
        }
    }
}

pub(super) fn signature_identifier(algorithm: SignatureAlgorithm) -> CryptoAlgorithmIdentifier {
    CryptoAlgorithmIdentifier {
        algorithm: Some(ProtoAlgorithmBranch::Signature(EnumValue::from(algorithm))),
        __buffa_unknown_fields: Default::default(),
    }
}